I want to map a folder on the cloud for the users, however SMB ports are blocked by the ISP.
Is there any workaround or any other solution for this?
↧
SMB ports blocked
↧
Work Folders on-demand access
Hello Guys,
I have configured work folders in our company but I'm facing some strange behavior.
On client computer Windows 10 1803 x64 I have enabled GPO setting GhostingPolicy to UserChoice:
When a user clears the checkbox as shown on this screenshot, it's working until next login to the computer.
After users logs in, the checkbox is enabled again itself.
Is this a bug or do you have any information on how to prevent this?
Thanks
Matej
↧
↧
what is the S2D windows account permission requirement.
hi expert,
Trying to setup S2D on windows 2016, may I know what is the window account permission required?
if cant use domain admin, what should be the permission required?
thanks
↧
Filter Event by Folder name
Hello All member
I enable file audit on folder for monitor already. How can I filter event id by this folder only to monitor who access ?
<QueryList><Query Id="0" Path="Security"><Select Path="Security">
*[System[band(Keywords,13510798882111488) and (EventID=5145)]]
and
*[EventData[Data[@Name='ObjectName']and(Data='K:\save\photo\55701-55800\55780\')]]</Select></Query></QueryList>↧
DFS namespace problem on disc mounted to NTFS folder
Hello
We map disc not like letter (D:\ etc), but use Mount to NTFS folder. When I create DFS namespace at this disc (for example c:\storage\DISC1\test_DFS) and perform restart of service DFS (or restart server), we could observe new folder with strange symbol in name (겱Test01).
And new folders coming in every next service restart. We are sure it is bug in DFS namespace.
Preview of this issue below.
Is there a chance to resolve this problem?
Zdenek
Zdenek Mozis
↧
↧
Work Folders - Every file "Failed to Synchronize an item"
Hello,
I've been having a few issues in recent months where Work Folders has started to stop syncing correctly. The Control Panel UI will sit their 'Synchrnosing' and the Operational Event Log fills up with thousands of warnings of files not being able to be created.
These warnings related to every single file of the users work folder that's currently sat on our Windows 2012 R2 server, and each warning states that "SSA_CREATE: Error Code: (0x80070003) The system cannot find the path specified.".
No files are downloaded from the users WorkFolder Share.
The user can log on successfuly to the Work Folders URL path so it doesn't seem to be an authentication issue. The files are all present on the server for every single warning i've read.
I'm looking for some help or guidance as to what could be the issue - is there any way of finding more logs? or avenues for discovering the issue? This has so far happened to 4 of my users this year, all with the same issue, they could sync perfectly fine when it was first configured, but eventually files would not sync across computers with the same warnings appearing on each client.
Server indicates that the sync partnerships is correct. But as a test I have performed Repair-SyncShare on the affected user - but with no success.
↧
File Services HA & DR Options
Planning to implement File Servers on virtual machines and trying to understand all the new features.
I will implement DFS-N as always have done this.
I have two sites - primary and DR.
Storage Replica seems to be the way to go as opposed to DFS-R.
Is a stretch cluster using shared storage (shared vdisk) providing any benefit over 2 clusters using cluster-to-cluster replication?
Is DFS-N + Storage Replica the norm now? Does DFS-N recognise the replicated secondary cluster or do I need to perform a manual switchover.
↧
DFS
Hello, we use DFSN,R a lot in our company.
I have a situation where I need to replicate a folder called USERS on Server 1 and another folder called USERS on Server 2.
I was doing a test to insure they would merge and not over write anything.
To my surprise DFS will not even let me set it up because the folder name is the same.
How should I be doing this?
↧
SMB 3.1.1 encryption and digitally signing
Currently I run a Windows Server 2016 (build 14393.2125) and Windows 10 1709 (build 16299.334) environment. I don't run any other versions of Windows.
Recently I enabled SMB v3 encryption server wide for all my file servers with the following command:
Set-SmbServerConfiguration –EncryptData $true
Set-SmbServerConfiguration –RejectUnencryptedAccess $true
None of my machines/servers have SMB1 installed and it is also disabled as follows:
Set-SmbServerConfiguration -EnableSMB1Protocol $false -Force
I have a few questions regarding encryption and digitally signing SMB after doing the above:
1) If I run:
Get-SmbConnection | select *
it shows:
SmbInstance : Default
ContinuouslyAvailable : False
Credential : domain\user
Dialect : 3.1.1
Encrypted : True
NumOpens : 1
Redirected : False
ServerName : SERVERNAME
ShareName : Share
Signed : False
UserName : domain\user
Why does it show "Signed" as false? How do I get all my SMB connections to be digitally signed? I've already set the registry key of RequireSecuritySignature to 1 for LanManServer and LanManWorkstation via GPO (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters). Does anything further need to be done? If I am using SMB3 encryption does this mean all connections (by default) are digitally signed?
If I run Get-SmbClientConfiguration or Get-SmbServerConfiguration it shows RequireSecuritySignature as True.
2) Since all my clients/servers support SMB 3.1.1 I would like to use AES-128-GCM as I have read that it has better performance than AES-128-CCM. After running a Wireshark capture I can see that SMB3 connections are using AES-128-CCM. How can I change this so that it uses AES-128-GCM only?
Thanks!
Recently I enabled SMB v3 encryption server wide for all my file servers with the following command:
Set-SmbServerConfiguration –EncryptData $true
Set-SmbServerConfiguration –RejectUnencryptedAccess $true
None of my machines/servers have SMB1 installed and it is also disabled as follows:
Set-SmbServerConfiguration -EnableSMB1Protocol $false -Force
I have a few questions regarding encryption and digitally signing SMB after doing the above:
1) If I run:
Get-SmbConnection | select *
it shows:
SmbInstance : Default
ContinuouslyAvailable : False
Credential : domain\user
Dialect : 3.1.1
Encrypted : True
NumOpens : 1
Redirected : False
ServerName : SERVERNAME
ShareName : Share
Signed : False
UserName : domain\user
Why does it show "Signed" as false? How do I get all my SMB connections to be digitally signed? I've already set the registry key of RequireSecuritySignature to 1 for LanManServer and LanManWorkstation via GPO (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters). Does anything further need to be done? If I am using SMB3 encryption does this mean all connections (by default) are digitally signed?
If I run Get-SmbClientConfiguration or Get-SmbServerConfiguration it shows RequireSecuritySignature as True.
2) Since all my clients/servers support SMB 3.1.1 I would like to use AES-128-GCM as I have read that it has better performance than AES-128-CCM. After running a Wireshark capture I can see that SMB3 connections are using AES-128-CCM. How can I change this so that it uses AES-128-GCM only?
Thanks!
↧
↧
Windows 10 Storage Spaces
Hello
I have been using Storage spaces for over 2 years without much of a problem until now.
I have 6 drives in the pool totaling about 10tb.
10 days ago, I was doing some clean up and deleted 350gb of data but the pool availability did not change.
I noticed that the recycle bin was full so I figured that I need to empty it out. Well that's where it went wrong.
Since emptying the recycle bin, the storage space drive disappeared from the windows explorer. I can see the drives are "working" and if I go in Storage Spaces, it is showing all 6 drives are in good condition with about 70% capacity. All options other than rename are grey out.
Now it has been 10 days now and I re-started my computer once to see whether it did any good, well no, it did not.
Does everyone knows what's wrong or should I just wait it out for the pool to sort itself out.
Please advise.
Many thanks in advance
Henry
↧
Migrate from work folders to OneDrive
Hi all,
We are migrating users to office 365 OneDrive and we need a way to automatically stop work folders and delete the data on the client.
Is there a way to do this without user interaction?
Rahamim.
↧
Is there Any Inbuilt alternative to Dokan
Hi,
Is there any in built alternative to Dokan user mode file System driver, windows is providing.
Currently libfuse is part Linux OS.
Please let me know, if something similar to Dokan is already there which can be used.
Thanks,
Jamey
↧
1 VD / 4 Volumes - vs. - 4 VD / 1 Volume
Hi Experts, I will configure four additional volumes on my server. I installed a bunch of additional disks and now .....
What is the best way and why?
1. I configure one big [Storage Pool] and one big [Virtual Disk]. In that big VD, I create four Volumes.
or
2. I configure one big [Storage Pool] and four big [Virtual Disk]. In each of these four VD, I create a Volume.
The result looks the same, 4 volumes, but is it the same?
Thanks in advance.
George
↧
↧
Permissions problems
Hi we have a server which is having a lot of problems with permissions on certain files.
I can copy over some but not all files held within a folder.
I have made myself owner have given myself full permissions and get a message saying I need permission from myself.
I have revoked all permissions via SubinACL tool and added myself as the Owner, Folder permissions and ACL and still cannot copy over some files, the error still remains.
How can I go about fixing this error. I have set permissions under the local admin account to ensure I don't run into additional access errors.
↧
Storage Replica Partnership Failover Options...Failed to provision partition error
Hi all, has anyone come across a method for re-establishing a new storage replica server-server partnership following the loss of the primary / source computer? I can failover to the secondary successfully but face an error when 'failing back' to a new primary.
Is it possible to start a new replication partnership with a disk that has previously been used for replication?
Here is the situation I'm considering:
- Establish a new partnership ......New-SRPartnership -SourceComputerName COMPUTER1 -SourceRGName "RG01" -SourceVolumeName "D:" -SourceLogVolumeName "L:" -DestinationComputerName COMPUTER2 -DestinationRGName "RG02" -DestinationVolumeName "D:" -DestinationLogVolumeName "L:"
- Total loss of COMPUTER1
- I've considered two separate methods from COMPUTER2 to failover, a) Set-SRPartnership to change the direction of replication and b) Remove-SRPartnership and Clear-SRMetadata. Either way COMPUTER2 can now successfully be used by clients
- A new server, COMPUTER3 is built. I want to create a SR partnership between COMPUTER2 and COMPUTER3.
- New-SRPartnership fails with the below error....
New-SRPartnership : Unable to create replication group RG03, detailed reason: Failed to provision
partition 5e862dd9-ecb1-49a3-b086-29857cfcf215. This is an error relating to COMPUTER2
↧
Upgrade of 4 disks in storage space
Hi, I recently purchased a much larger disk set for my storage spaces drive setup (two-way mirror with 4x3TB WD Disks, two RED NAS +2 GREEN) and I upgraded with 4x8TB IRONWOLF disks.
Because I wanted to maintain the drive active across the process, I started replacing the disks one by one, instead of building another pool and copying everything across.
1st disk went super easy, marked it for removal, and then when it finished I have removed it from the pool.
2nd disk I used the same process, but it won't remove. I replaced it none the less as I still had resiliency.
3rd disk the same happened, and I lost resiliency, but all data is there. I did a rebalance, and the 8 tb disks (all 4x8TB are installed now).
I am now with 6 disks installed, no resiliency, and data is scattered +/- 36% in each of the IRONWOLF 8TB disks and only 0.02% on one of the old green drives and another with 0.06%.
I tried repairing the pool multiple times but it throws an error in the process, and I can't remove the 2 WD 3TB Green Drives, as they display in the pool
Here's a powershell dump of my config:
PS C:\WINDOWS\system32> get-physicaldisk FriendlyName SerialNumber MediaType CanPool OperationalStatus HealthStatus Usage Size ------------ ------------ --------- ------- ----------------- ------------ ----- ---- RED D3 (Replacement) HDD False Lost Communication Warning Retired 2.73 TB WD My Passport 259D WXQ1EB516A0V HDD False OK Healthy Auto-Select 2.73 TB GREEN D2 WD-WMC1T2654858 Unspecified False OK Healthy Retired 2.73 TB IRONWOLF_D ZA1E0ZQ3 HDD False OK Healthy Auto-Select 7.28 TB IRONWOLF_C ZA1E0NQJ HDD False OK Healthy Auto-Select 7.28 TB Crucial_CT525MX300SSD4 170815FF0F48 SSD False OK Healthy Auto-Select 489.05 GB IRONWOLF_A ZA1E3RGY HDD False OK Healthy Auto-Select 7.28 TB WDC WD30EFRX-68EUZN0 HDD False Lost Communication Warning Retired 2.73 TB WDC WD30EZRX-00DC0B0 WD-WMC1T2405274 Unspecified True OK Healthy Auto-Select 2.73 TB IRONWOLF_B ZA1DYTBX HDD False OK Healthy Auto-Select 7.28 TB PS C:\WINDOWS\system32> get-virtualdisk FriendlyName ResiliencySettingName FaultDomainRedundancy OperationalStatus HealthStatus Size FootprintOnPool StorageEfficiency ------------ --------------------- --------------------- ----------------- ------------ ---- --------------- ----------------- Storage space Mirror 1 No Redundancy Unhealthy 5.45 TB 10.59 TB 51.47% PS C:\WINDOWS\system32> Get-StorageJob Name IsBackgroundTask ElapsedTime JobState PercentComplete BytesProcessed BytesTotal ---- ---------------- ----------- -------- --------------- -------------- ---------- Storage space-Repair False 21:06:42 Running 30 1.84 GB 6 GB Storage pool-Rebalance True 00:00:00 Running 93 3.27 TB 3.49 TB Storage space-Regeneration True 00:00:04 Running 30 1.84 GB 6 GB PS C:\WINDOWS\system32> Get-StorageJob Name IsBackgroundTask ElapsedTime JobState PercentComplete BytesProcessed BytesTotal ---- ---------------- ----------- -------- --------------- -------------- ---------- Storage pool-Rebalance True 00:00:00 Running 94 3.31 TB 3.51 TB Storage space-Repair True 21:09:56 Suspended 0 0 B 4 GB PS C:\WINDOWS\system32>
and below here's the response to the Repair-VirtualDisk command issued to fix the issue:
PS C:\WINDOWS\system32> Set-PhysicalDisk -FriendlyName 'GREEN D2' -Usage Retired
PS C:\WINDOWS\system32> Set-PhysicalDisk -FriendlyName 'WDC WD30EZRX-00DC0B0' -Usage Retired
Set-PhysicalDisk : Not Supported
Activity ID: {9c9cdba9-91d9-4bdf-a226-9db3fd30666d}
At line:1 char:1+ Set-PhysicalDisk -FriendlyName 'WDC WD30EZRX-00DC0B0' -Usage Retired+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo : InvalidOperation: (StorageWMI:ROOT/Microsoft/..._StorageCmdlets) [Set-PhysicalDisk], Cim
Exception+ FullyQualifiedErrorId : StorageWMI 1,Set-PhysicalDisk
PS C:\WINDOWS\system32> Repair-VirtualDisk -FriendlyName 'Storage space'
Repair-VirtualDisk : Unspecified Error
Extended information:
Element not found.
Activity ID: {bc7b4987-766d-4e4e-8cd0-126043c49f54}
At line:1 char:1
+ Repair-VirtualDisk -FriendlyName 'Storage space'+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo : NotSpecified: (StorageWMI:ROOT/Microsoft/...SFT_VirtualDisk) [Repair-VirtualDisk], CimEx
ception+ FullyQualifiedErrorId : StorageWMI 2,Repair-VirtualDisk
PS C:\WINDOWS\system32>So, I am stuck with a still small pool, 32GB of total useable pool size, but just 5.45TB of free space, who are rapidly filling up with renders from a computer animation we're doing.
We will soon run out of space, if I don't fix this soon... :O
Thanks for your help, looking forward to hear about possible solutions.
↧
the request to install fsrm management failed
Hi There,
I have a file server running on Windows 2008 R2. I have to install the role FSRM MANAGEMENT.
But when I try to install i find the error: the request to add or remove on specified server failed. the system cannot find the specified file. I found in the logs the error that is given below :
log name: setup
sorce servicing
event id: 11
Event ID: 11
Task Category: (1)
Level: Information
Keywords:
User: SYSTEM
Computer: SRVFC003.ENANA.NET
Description:
Update FSRM-Management of package FSRM-All failed to be turned on. Status: 0x80070002.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Servicing" Guid="{BD12F3B8-FC40-4A61-A307-B7A013A069C1}" />
<EventID>11</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>1</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-03-31T00:47:23.860591100Z" />
<EventRecordID>371</EventRecordID>
<Correlation />
<Execution ProcessID="5356" ThreadID="6652" />
<Channel>Setup</Channel>
<Computer>SRVFC003.ENANA.NET</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CbsUpdateChangeState xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
<UpdateName>FSRM-Management</UpdateName>
<PackageIdentifier>FSRM-All</PackageIdentifier>
<ErrorCode>0x80070002</ErrorCode>
<Client>DISM Package Manager Provider</Client>
</CbsUpdateChangeState>
</UserData>
</Event>
Is there any way to fix this issue? Thanks in advance for your help.
↧
↧
Offline files disappear when going back online
Hello,
We are looking at deploying a fleet of laptops.
Currently our desktop users have Folder Redirection and DFS.
We would like to utilize this for our laptops, but with the added feature of offline files for when they are not connect to the network.
I have created a group policy and enabled offline files, and when logging into the network on a laptop I can see that this looks like it works.
While offline, if I create a new file and connect back to the network the file disappears.
If I modify a file that was created online, the changes sync fine.
Does anyone have any experience with this kind of setup? ISsthere something/somewhere I can look to see where these files are going and what is causing this? I suspect it is DFS - I think I must be missing something.....
thanks.
↧
Roaming Profile not Syncing on Windows Server
Hi Fellows,
I have set Roaming Profile -by the book- for 1 account on the Domain. (folder share, GPO, AD user profile path)
The user is not doing a real logon (Interactive), it used as logon account for 1 of windows service
the purpose of the roaming profile, is store a critical key files under AppData folder in romaing profile
So in case of failure to lunch the service on new server and load these key files from roaming
Now, the issue is that the Roaming Profile was never Synced
Does anyone know this behavior?is it supported method of sync profile with NOT a real logon, only service start/stop.. supposing this consider a specific logon type
Please advice?
Thanks
Abed
↧
DFS Namespaces Config
PRFS1 DRFS1
PRFS1\Share1 PRFS1\Share1
PRFS1\Share2 PRFS1\Share2
PRFS2 DRFS2
PRFS2\Share3 PRFS2\Share3
PRFS2\Share4 PRFS2\Share4
PRFS1\Share1 PRFS1\Share1
PRFS1\Share2 PRFS1\Share2
PRFS2 DRFS2
PRFS2\Share3 PRFS2\Share3
PRFS2\Share4 PRFS2\Share4
Primary site has 2 File Servers. Plan to add 2 File Servers for DR site.
Each share contains multiple folders controlled by NTFS permissions.
e.g.
PRFS1
PRFS1\Share1\User1
\User2
PRFS1\Share2\User3
\User4
Plan to implement DFS Namespaces and DR.
Root will be DOMAIN.COM\Shares
1. Do folder targets have to have the exact same content? If replication isn't configured can DFS aggregate the contents and show everything across all folders?
2. Do I implement this as 4 targets:
\\DOMAIN.COM\Shares\Share1
\\DOMAIN.COM\Shares\Share2
\\DOMAIN.COM\Shares\Share3
\\DOMAIN.COM\Shares\Share4
3. Or do I flatten out tree in the namespace:
\\DOMAIN.COM\Shares\Share1User1
\\DOMAIN.COM\Shares\Share1User2
4. Is it not possible to present a single namespace target to all users:
\\DOMAIN.COM\Shares\
5. When adding replication into this for DR - I guess targets need to be in sync
↧